역할-기반 접근 제어에서 역할 위임을 위한 역할 위임 서버의 설계 = Design of Role Delegation Server in Role-Based Access Control

다국어 초록 (Multilingual Abstract)

In the distributed computing environment, applications or users have to share resources and communicate with each other in order to perform their job efficiently. In this case, it is important to keep resources and information integrity from attackers. Therefore, the need for a reasonable way for authentication and access control of distributed shared resources has increased.
Nowadays, three kinds of access control exist; DAC(Discretionary Access Control), MAC(Mandatory Access Control) and RBAC(Role-Based Access Control). In RBAC, there exists a role hierarchy. In the role hierarchy, higher case role can perform lower case role’s permission. Not vise versa. Therefore, RBAC sometimes needs role delegation, for lower case role performs higher case role’s permission.
In this paper, we propose a role delegation method with role delegation server and role delegation protocol with public and secret key. Consequently lower case role performs higher case role’s permission with exceptional conditions and dedicated intervals.

목차 (Table of Contents)

• Ⅰ. 개 요
• Ⅱ. 역할-기반 접근 제어(RBAC) 모델
• 2.1 역할-기반 접근 제어
• 2.2 역할-권한 관계(Role-Permission Relationship)
• 2.3 역할-역할 관계(Role-Role Relationship)
• Ⅲ. 역할 위임(Role Delegation)
• 3.1 역할 위임 서버(Role Delegation Server)
• 3.2 역할 위임 프로토콜(Role Delegation Protocol)
• 3.3 능동적 위임
• 3.4 수동적 위임
• Ⅳ. 결 론